Enhanced physical layer security

ABSTRACT

This disclosure generally relates to methods, systems, and devices for enhanced physical (PHY) layer security. A device may determine a physical layer (PHY) frame to be sent to a station device. The device may identify an encryption seed sequence to be used for encrypting a first portion of the PHY frame. The device may include an indication of the encryption seed sequence in a first field of one or more fields of the PHY frame. The device may encode the first portion of the PHY frame using the encryption seed sequence. The device may cause to send the PHY frame to the station device.

CROSS-REFERENCE TO RELATED APPLICATION(S)

This application is a U.S. National Stage Application under 35 U.S.C.371 and claims the priority benefit of PCT International Application No.PCT/US2017/067125, filed Dec. 18, 2017, the disclosure of which isincorporated herein by reference as if set forth in full.

TECHNICAL FIELD

This disclosure generally relates to systems and methods for wirelesscommunications and, more particularly, to enhanced physical (PHY) layersecurity.

BACKGROUND

Wireless devices are becoming widely prevalent and are increasinglyrequesting access to wireless channels to participate in wirelesscommunications. Security of wireless communications is an importantaspect in wireless networks.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a network diagram illustrating an example network environment,in accordance with one or more example embodiments of the presentdisclosure.

FIG. 2 depicts an illustrative schematic diagram for a medium accesscontrol (MAC) frame format and control field.

FIGS. 3A-3C depict illustrative schematic diagrams for an enhancedphysical layer (PHY) layer security system, in accordance with one ormore example embodiments of the present disclosure.

FIG. 4 depicts an illustrative schematic diagram for an enhanced PHYlayer security system, in accordance with one or more exampleembodiments of the present disclosure.

FIG. 5 depicts an illustrative flowchart for an enhanced PHY layersecurity system, in accordance with one or more example embodiments ofthe present disclosure.

FIG. 6 depicts an illustrative schematic diagram for an enhanced PHYlayer security system, in accordance with one or more exampleembodiments of the present disclosure.

FIG. 7A illustrates a flow diagram of illustrative process for anillustrative enhanced PHY layer security system, in accordance with oneor more example embodiments of the present disclosure.

FIG. 7B illustrates a flow diagram of illustrative process for anillustrative enhanced PHY layer security system, in accordance with oneor more example embodiments of the present disclosure

FIG. 8 depicts a functional diagram of an example communication stationthat may be suitable for use as a user device, in accordance with one ormore example embodiments of the disclosure.

FIG. 9 depicts a block diagram of an example machine upon which any ofone or more techniques (e.g., methods) may be performed, in accordancewith one or more embodiments of the disclosure.

DETAILED DESCRIPTION

Example embodiments described herein provide certain systems, methods,and devices for enhanced PHY layer security. The following descriptionand the drawings sufficiently illustrate specific embodiments to enablethose skilled in the art to practice them. Other embodiments mayincorporate structural, logical, electrical, process, and other changes.Portions and features of some embodiments may be included in, orsubstituted for, those of other embodiments. Embodiments set forth inthe claims encompass all available equivalents of those claims.

In the upcoming IEEE 802.11ax standard, Wi-Fi APs (access points) canschedule/solicit multi-user (MU) uplink (UL) transmissions by sendingtransmission configuration information, such as an resource unit (RU)allocation, modulation encoding scheme (MCS), etc., for the solicited MUUL physical layer convergence protocol (PLCP) data unit (PPDU)transmissions in a control frame called trigger frame (TF). Upon thereceipt of the TF, solicited UL station devices (STAs) respond to the TFby sending MU UL PPDUs using the transmission configuration indicated inthe TF.

However, such TFs are broadcast packets and can be easily overheard byany (malicious) devices or attackers, thus making the trigger-based MUUL transmissions vulnerable to various attacks, such as replay,spoofing, denial-of-sleep. For example, when an AP sends a TF, anattacker can detect and record the TF and launch a replay attack laterto falsely trigger unrequested MU UL PPDU transmissions from the STAsand prevent them from entering low-power sleep states. Such a TF replayattack is feasible/plausible with advance (and availability) in softwaredefined radio (SDR) platforms, and can easily disrupt the normaloperation of the Wi-Fi network especially in a dense Wi-Fi deploymentareas.

Previous Wi-Fi standards focused on upper layer (e.g., applicationlayer) security protection mechanisms. There has not been an attempt tocreate mechanisms to increase security in the physical (PHY) layerprotocol. With increased malicious attacks on all systems, it isbeneficial to increase the complexity of the security, and if possible,at all layers in the communication stack. Having PHY security canprevent unintended (or malicious) Wi-Fi devices from detecting anddecoding Wi-Fi signals transmitted by other legitimate Wi-Fi accesspoints (APs) and stations (STAs).

Malicious devices can store and post-process the received (and decoded)Wi-Fi signals to look into the data payload or infer various informationeven using the encrypted bits. For example, the recent advances inmachine-learning and deep-learning technologies make even correctlydecoded bits in the PHY-layer valuable information that can lead tosecurity breaches.

In the future Wi-Fi systems, the FCC (federal communications commission)may open up a new wireless frequency band (e.g., 6-7 GHz) for unlicensedWi-Fi operation which will allow a new 802.11 PHY/MAC design (a.k.a.greenfield). Therefore, it is a good opportunity to introduce propersecurity mechanisms in the PHY layer for next generation Wi-Fi systems.Currently there are no efficient mechanisms to prevent malicious 802.11devices or SDRs from recording and replaying an 802.11ax TF to falselytrigger MU UL transmissions or other types of malicious attacks.

Example embodiments of the present disclosure relate to systems,methods, and devices for enhanced PHY layer security, negotiation andprotocol to set up triggered (TD) P2P operation.

In one embodiment, an enhanced PHY layer security system may “encrypt” acertain part of the PHY preamble (e.g., HE-SIG-A) so that onlylegitimate STAs (those which are associated with the AP) can decode thePHY preamble and proceed to decode the MAC header and data payload. ThePHY preamble will be “encrypted” using a secure key shared between theAP and STAs during association procedure. This will preventnon-legitimate STAs (or malicious devices) from correctly decoding thePHY preamble and detecting the frame type (e.g., TF).

In one embodiment, an enhanced PHY layer security system mayencrypt/randomize orthogonal frequency-division multiplexing (OFDM)pilot tone allocations throughout the PPDU so that only legitimate STAswith the pre-shared key (PSK) (e.g., password, paraphrase, etc.)information can correctly identify the pilot tone allocations to decodethe entire PPDU. This approach can also be extended to the data tones aswell, but this discussion will focus on the pilot tones. Both approacheswould provide even more protection. However, implementing the pilottones protection provides significant protection, and minimizes hardwaredesign changes from previous Wi-Fi standards. For this, a specialsignaling (SIG) field may be, called Next-Generation (NG)-SIG, as partof the greenfield PHY design for next-generation Wi-Fi. This NG-SIGfield may include a “seed” information field where the value of the“seed” field can be used by legitimate STAs to correctly “decrypt” theOFDM pilot (or data) tone allocation for the subsequent OFDM symbols(including additional PHY preambles and data payload). The decryptionrequires the shared key information exchanged between the AP andlegitimate STAs during association process over a secure channel,therefore unintended STAs (e.g., hackers/attackers) cannot correctlydecrypt the pilot location and will fail to decode the OFDM symbolsfollowing the NG-SIG.

In one embodiment, an enhanced PHY layer security system may provide anew PHY layer protection which will be the first line of defense in theWi-Fi stack. This will make next generation Wi-Fi systems much moresecure, robust and privacy-friendly compared to today's Wi-Fi systems.This is especially the case when the fast advances inmachine-/deep-learning are considered and big data analytics, whichenable hackers to infer more private information with fewer amounts oflow-level (PHY-layer) data.

The above descriptions are for purposes of illustration and are notmeant to be limiting. Numerous other examples, configurations,processes, etc., may exist, some of which are described in greaterdetail below. Example embodiments will now be described with referenceto the accompanying figures.

FIG. 1 is a network diagram illustrating an example network environment,in accordance with one or more example embodiments of the presentdisclosure. Wireless network 100 may include one or more user device(s)120 and one or more access point(s) (AP) 102, which may communicate inaccordance with IEEE 802.11 communication standards. The user device(s)120 may be referred to as stations (STAs). The user device(s) 120 may bemobile devices that are non-stationary and do not have fixed locations.Although the AP 102 is shown to be communicating on multiple antennaswith user devices 120, it should be understood that this is only forillustrative purposes and that any user device 120 may also communicateusing multiple antennas with other user devices 120 and/or AP 102.

In some embodiments, the user devices 120 and AP 102 may include one ormore computer systems similar to that of the functional diagram of FIG.8 and/or the example machine/system of FIG. 9.

One or more illustrative user device(s) 120 and/or AP 102 may beoperable by one or more user(s) 110. The user device(s) 120 (e.g., 124,126, or 128) and/or AP 102 may include any suitable processor-drivendevice including, but not limited to, a mobile device or a non-mobile,e.g., a static, device. For example, user device(s) 120 and/or AP 102may include, a user equipment (UE), a station (STA), an access point(AP), a personal computer (PC), a wearable wireless device (e.g.,bracelet, watch, glasses, ring, etc.), a desktop computer, a mobilecomputer, a laptop computer, an Ultrabook™ computer, a notebookcomputer, a tablet computer, a server computer, a handheld computer, ahandheld device, an internet of things (IoT) device, a sensor device, aPDA device, a handheld PDA device, an on-board device, an off-boarddevice, a hybrid device (e.g., combining cellular phone functionalitieswith PDA device functionalities), a consumer device, a vehicular device,a non-vehicular device, a mobile or portable device, a non-mobile ornon-portable device, a mobile phone, a cellular telephone, a PCS device,a PDA device which incorporates a wireless communication device, amobile or portable GPS device, a DVB device, a relatively smallcomputing device, a non-desktop computer, a “carry small live large”(CSLL) device, an ultra mobile device (UMD), an ultra mobile PC (UMPC),a mobile internet device (MID), an “origami” device or computing device,a device that supports dynamically composable computing (DCC), acontext-aware device, a video device, an audio device, an A/V device, aset-top-box (STB), a blu-ray disc (BD) player, a BD recorder, a digitalvideo disc (DVD) player, a high definition (HD) DVD player, a DVDrecorder, a HD DVD recorder, a personal video recorder (PVR), abroadcast HD receiver, a video source, an audio source, a video sink, anaudio sink, a stereo tuner, a broadcast radio receiver, a flat paneldisplay, a personal media player (PMP), a digital video camera (DVC), adigital audio player, a speaker, an audio receiver, an audio amplifier,a gaming device, a data source, a data sink, a digital still camera(DSC), a media player, a smartphone, a television, a music player, orthe like. It is understood that the above is a list of devices. However,other devices, including smart devices such as lamps, climate control,car components, household components, appliances, etc. may also beincluded in this list.

Any of the user device(s) 120 (e.g., user devices 124, 126, 128), and AP102 may be configured to communicate with each other via one or morecommunications networks 130 and/or 135 wirelessly or wired. Any of thecommunications networks 130 and/or 135 may include, but not limited to,any one of a combination of different types of suitable communicationsnetworks such as, for example, broadcasting networks, cable networks,public networks (e.g., the Internet), private networks, wirelessnetworks, cellular networks, or any other suitable private and/or publicnetworks. Further, any of the communications networks 130 and/or 135 mayhave any suitable communication range associated therewith and mayinclude, for example, global networks (e.g., the Internet), metropolitanarea networks (MANs), wide area networks (WANs), local area networks(LANs), or personal area networks (PANs). In addition, any of thecommunications networks 130 and/or 135 may include any type of mediumover which network traffic may be carried including, but not limited to,coaxial cable, twisted-pair wire, optical fiber, a hybrid fiber coaxial(HFC) medium, microwave terrestrial transceivers, radio frequencycommunication mediums, white space communication mediums, ultra-highfrequency communication mediums, satellite communication mediums, or anycombination thereof.

Any of the user device(s) 120 (e.g., user devices 124, 126, 128), and AP102 may include one or more communications antennas. The one or morecommunications antennas may be any suitable type of antennascorresponding to the communications protocols used by the user device(s)120 (e.g., user devices 124, 126 and 128), and AP 102. Some non-limitingexamples of suitable communications antennas include Wi-Fi antennas,Institute of Electrical and Electronics Engineers (IEEE) 802.11 familyof standards compatible antennas, directional antennas, non-directionalantennas, dipole antennas, folded dipole antennas, patch antennas,multiple-input multiple-output (MIMO) antennas, omnidirectionalantennas, quasi-omnidirectional antennas, or the like. The one or morecommunications antennas may be communicatively coupled to a radiocomponent to transmit and/or receive signals, such as communicationssignals to and/or from the user devices 120 and/or AP 102.

Any of the user device(s) 120 (e.g., user devices 124, 126, 128), and AP102 may be configured to perform directional transmission and/ordirectional reception in conjunction with wirelessly communicating in awireless network. Any of the user device(s) 120 (e.g., user devices 124,126, 128), and AP 102 may be configured to perform such directionaltransmission and/or reception using a set of multiple antenna arrays(e.g., DMG antenna arrays or the like). Each of the multiple antennaarrays may be used for transmission and/or reception in a particularrespective direction or range of directions. Any of the user device(s)120 (e.g., user devices 124, 126, 128), and AP 102 may be configured toperform any given directional transmission towards one or more definedtransmit sectors. Any of the user device(s) 120 (e.g., user devices 124,126, 128), and AP 102 may be configured to perform any given directionalreception from one or more defined receive sectors.

MIMO beamforming in a wireless network may be accomplished using RFbeamforming and/or digital beamforming. In some embodiments, inperforming a given MIMO transmission, user devices 120 and/or AP 102 maybe configured to use all or a subset of its one or more communicationsantennas to perform MIMO beamforming.

Any of the user devices 120 (e.g., user devices 124, 126, 128), and AP102 may include any suitable radio and/or transceiver for transmittingand/or receiving radio frequency (RF) signals in the bandwidth and/orchannels corresponding to the communications protocols utilized by anyof the user device(s) 120 and AP 102 to communicate with each other. Theradio components may include hardware and/or software to modulate and/ordemodulate communications signals according to pre-establishedtransmission protocols. The radio components may further have hardwareand/or software instructions to communicate via one or more Wi-Fi and/orWi-Fi direct protocols, as standardized by the Institute of Electricaland Electronics Engineers (IEEE) 802.11 standards. In certain exampleembodiments, the radio component, in cooperation with the communicationsantennas, may be configured to communicate via 2.4 GHz channels (e.g.,802.11b, 802.11g, 802.11n, 802.11ax), 5 GHz channels (e.g., 802.11n,802.11ac, 802.11ax), or 60 GHz channels (e.g., 802.11ad). In someembodiments, non-Wi-Fi protocols may be used for communications betweendevices, such as Bluetooth, dedicated short-range communication (DSRC),Ultra-High Frequency (UHF) (e.g. IEEE 802.11af, IEEE 802.22), white bandfrequency (e.g., white spaces), or other packetized radiocommunications. The radio component may include any known receiver andbaseband suitable for communicating via the communications protocols.The radio component may further include a low noise amplifier (LNA),additional signal amplifiers, an analog-to-digital (A/D) converter, oneor more buffers, and a digital baseband.

In some demonstrative embodiments, the user device(s) 120 and/or the AP102 may be configured to operate in accordance with one or morespecifications, including one or more IEEE 802.11 specifications (e.g.,an IEEE 802.11ax specification, and/or any other specification and/orprotocol).

In some demonstrative embodiments, a frame such as a frame 140 may beused to communicate between the AP 102 and the user device(s) 120. Theframe 140 may be a PHY frame that includes a PHY preamble. In thisexample, there is shown a hacker device 144 that may intercept the frame140 and may alter it before it goes from one device to another.

An enhanced PHY layer security system may provide a low complexity, yetefficient, PHY layer security mechanism. The enhanced PHY layer securitysystem may facilitate that only legitimate Wi-Fi STAs (those that arecurrently associated with the transmitting AP) can correctly unscrambleand decode the entire PSDU (PLCP Service Data Unit) transmitted by alegitimate AP or STA. Other legitimate overlapping basic service set(OBSS) STAs (those that are currently associated with other legitimateAPs) can still obtain the necessary information (e.g., expected lengthof the transmission) to properly defer their medium access.

Currently there are no efficient PHY layer security mechanisms thatallow only legitimate (or targeted) STAs to correctly descramble anddecode received Wi-Fi signals. The lack of efficient PHY layer securitymechanisms make the current (and potentially next-gen) Wi-Fi systemsvulnerable to various attacks, including eavesdropping, replay,men-in-the-middle, denial-of-service/sleep, and traffic analysisincluding machine-learning (or deep-learning) based inference, etc. Itis understood that the above descriptions are for purposes ofillustration and are not meant to be limiting.

FIG. 2 depicts an illustrative schematic diagram 200 for an MAC frameformat and control field.

Referring to FIG. 2, there is shown an MAC frame format that may be sentfrom an AP 202 to a user device 222. The MAC frame comprises an MACheader and a frame body, which may be comprised of one or more fields.The MAC header may include a frame control field 204. The frame controlfield 204 may be comprised of one or more subfields, for example, a typesubfield 206 and a subtype subfield 208

Most of the existing security mechanisms focus on the MAC (or above)layer approaches, which cannot prevent attackers from detecting/decodingTFs sent by the AP. A trigger frame is a frame that contains a framehaving an MAC header and other fields that may be sent from an APinforming all user devices serviced by the AP that channel access isavailable. With OFDMA, the AP may transmit a TF for various reasons,such as allocating resources. User devices may use the allocatedresource to transmit their data.

For example, an attacker can easily detect TFs sent by the AP bydecoding the type subfield 206 and subtype subfield 208 of the framecontrol field 204 in the MAC header, as shown in FIG. 2. In 802.11ax,TFs are identified by “01 (B3-B2)” in the type subfield 206 and “0010(B7-B4)” in the subtype subfield 208 field of the frame control field204.

Once the attacker detects 802.11ax TFs based on the frame control field204 in the MAC header, then it can store the entire received TF andlaunch a replay attack by then transmitting the stored baseband samples.Another attack model is that the attacker builds a “fake” TF by settingthe “Type” and “Subtype” subfields in the frame control field toindicate a TF. In both cases, the STAs will consider these malicious TFsas a legitimate TF, and respond using a MU UL PPDU transmission.

Such TF-targeted attacks can negatively impact the system performancebecause STAs need to decode the entire “fake” TF PPDU, during which theycannot receive legitimate PPDUs from the AP. Even worse, if an attackermanipulates (e.g., increases) the “LENGTH” subfield of the legacy signal(L-SIG) field in the fake/replayed PPDU, the PHY receive (RX) chain ofthe STAs will be stuck decoding the PPDU OFDM symbol for a long timeuntil it processes the expected number of OFDM symbols (e.g.,“N_symbol”). It would do that based on the “LENGTH” field before itenters the “End of PSDU RX” state in the PHY receive state machine.

Therefore, an efficient mechanism is needed that allows STAs to detectbogus TFs (or PPDUs) in an earlier state in the PHY state machine sothat they do not need to process the entire PPDU wasting time/energy.Note that while a TF is used as an example, the proposed methods can beapplied to other types of PPDUs with the HE-SIG-A subfield (or othertypes of SIG fields in general).

FIGS. 3A-3C depict illustrative schematic diagrams for an enhanced PHYlayer security system, in accordance with one or more exampleembodiments of the present disclosure.

Referring to FIG. 3A, there is shown diagram 300 representing ahigh-efficiency multi-user (HE MU) PPDU, which comprises a PHY preamblehaving one or more fields. In 802.11 ax, the PHY preamble may comprise alegacy short training field (L-STF), a legacy long training field(L-LTF), a legacy signal field (L-SIG), a repeat L-SIG (RL-SIG) field, ahigh-efficiency signal field A (HE-SIG-A) 304, a high-efficiency signalfield B (HE-SIG-B), a high-efficiency short training field (HE-STF), oneor more high-efficiency long training fields (HE-LTFs), a data field,and other fields. High-efficiency signaling between one or more devicesmay be split into two fields, the high-efficiency signal A field(HE-SIG-A) and the high-efficiency signal B field (HE-SIG-B). Takentogether, the two fields may describe the included frame attributes suchas the channel width, modulation and coding, and whether the frame is asingle- or multi-user frame.

The HE-SIG-A 304 precedes the other HE fields in the PHY preamble. Itsformat may depend on whether the transmission is single-user ormulti-user. It is comprised of two parts, (each of which corresponds toan OFDM symbol), which are referred to as HE-SIG-A1 (e.g., HE-SIG-A1350) and HE-SIG-A2 (e.g., HE-SIG-A2 352).

In one embodiment, an enhanced PHY layer security system may usedifferent (randomized) pilot/data tone mapping in constructing the OFDMsymbol(s) in the PHY preamble for each PPDU (e.g., TF). “Randomizing”pilot tone means that the transmitter (e.g., AP) will use differentpilot/data tone subcarrier locations (as opposed to the conventional“fixed” pilot location as may be defined in a standard) where the pilottone allocation information is shared only among the legitimate Wi-Fi APand STAs, which have a shared key that is known to the transmitter(e.g., AP) and the receiver (e.g., STA). Therefore, non-legitimate STAsthat do not know/infer the correct pilot/data tone mapping fail tocorrectly decode the received OFDM symbols. Additionally, the attackercannot reconstruct/replay the same TF transmission, since each TFtransmission will have a new scrambling sequence based on the sharedkey. Therefore, legitimate STAs will not respond to a bogus TF with a ULtransmission. In fact, these STAs will stop decoding the bogus TF (orother PPDUs) when there is a mismatch with the pilot tone allocationinformation.

In one embodiment, an enhanced PHY layer security system may facilitateencryption of the HE-SIG-A2 field of the PHY preamble. In particular, anenhanced PHY layer security system may encrypt (or randomize) the pilottone locations of HE-SIG-A2 352. Some of the advantages of encryptingthe HE-SIG-A2 may include that by encrypting the HE-SIG-A2, all thelegitimate STAs and legitimate overlapping basic service set (OBSS)AP/STAs can detect legacy PHY preambles (e.g., L-STF, L-LTF, L-SIG) andobtain the length information to properly defer from accessing thechannel for the length duration indicated in the legacy PHY preamble.Another advantage is that the secure “key/seed” information can becontained in the previous OFDM symbol (e.g., the HE-SIG-A1 350), basedon which legitimate STAs compute the pilot tone allocation for the nextOFDM symbol (e.g., HE-SIG-A2 352). Further, encrypting the HE-SIG-A2prevents non-legitimate STAs from correctly decoding the PPDU (includingthe MAC header) because the PHY preamble is encrypted using a sharedkey. Since they cannot correctly identify a TF, they cannot launchreplay attacks. Plus, this prevents non-legitimate STAs fromconstructing a valid TF that can be decoded by legitimate STAs becausethe PHY preamble is “encrypted” using a shared key. TFs constructed byan attacker without using the valid shared key cannot be correctlydecoded by legitimate STAs. For example, even if an attacker (e.g., SDR)constructs a bogus TF, legitimate STAs will fail to decode the PHYpreambles (e.g., fail at cyclic redundancy code (CRC) check for theHE-SIG-A field) of the bogus PPDUs. Thus, they will not try to decodethe entire PPDU and will not respond to the bogus TFs soliciting MU ULtransmissions.

In one embodiment, an enhanced PHY layer security system may facilitateconstruction of the HE-SIG-A1 350 and the HE-SIG-A2 352 fields toprevent hackers from correctly decoding the information included inthese fields. The HE MU PPDU format used for an 802.11ax TF includes theHE-SIG-A field which consists of two OFDM symbols (each OFDM symbollength of 4 μs), (e.g., 4 μs for HE-SIG-A1 and 4 us for HE-SIG-A2, asshown in FIGS. 3A-3C).

The two OFDM symbols in the HE-SIG-A fields are encoded using aconvolution (BCC) encoder at the rate 1/2, and modulated using binaryphase shift keying (BPSK). The 26 bit information for the HE-SIG-A1field is encoded at rate 1/2, and the 52 encoded bits are interleavedbits and are modulated using BPSK and mapped into 52 data subcarriers.Then 4 pilot tones are inserted at subcarrier indexes ±7 and ±21. Thenext 26 bit information for the HE-SIG-A2 field is encoded/modulated inthe same way for the second OFDM symbol, and the pilots are inserted atthe same location, (e.g., ±7 and ±21).

In one embodiment, an enhanced PHY layer security system may introduce anew bit that replaces a reserve bit in the HE-SIG-A1. The new bit may beidentified as a “pilot encrypted” subfield. For example, looking atHE-SIG-A1 350 in FIG. 3B, the pilot encrypted subfield 358 may be usedby the AP to indicate whether there is encryption or not. For example,in order for legitimate STAs to compute the pilot tone allocation ofHE-SIG-A2 352, the transmitter (e.g., AP) uses the “BSS Color (B8-B13)”subfield 356 and the “Pilot Encrypted (B14)” subfield 358. The AP mayset the value of the “Pilot Encrypted (B14)” subfield 358 (currently“Reserved”) to “1” to indicate that the BSS color subfield 356 containsthe “seed” value for computing pilot mapping information for HE-SIG-A2subfield decoding. This way, when the receiver (e.g., STA) receives theHE-SIG-A1, it would be able to decode the pilot encrypted subfield 358to determine the seed needed to decrypt the pilot tone mapping forHE-SIG-A2.

In one embodiment, an enhanced PHY layer security system may convey the“seed” value for pilot tone mapping in the 6-bit “BSS Color” subfield356. If the value of the pilot encrypted subfield is “1”, the STAs willinterpret the value of the “BSS Color” subfield 356 as the seed value;otherwise, the STA will use the conventional pilot tone allocation todecode the HE-SIG-A2.

Note that the proposed frame formats/fields are shown as examples forthe purpose of illustration. For example, potentially another bit in theSIF field can be repurposed based on the mode of operation, or a newframe format can be defined as an extension to the current draft802.11ax or beyond 802.11ax standard (Next Big Thing).

In one embodiment, an enhanced PHY layer security system may randomizethe pilot tone allocation for HE-SIG-A2 based on the “seed” valueincluded in the BSS color subfield 356 by employing one or moremechanisms. There can be multiple ways to randomize the pilot toneallocation for the OFDM symbol which contains the HE-SIG-A2 subfield.For example, a first mechanism may be a “keyed-hash” based encryption,and a second mechanism may include an exclusive OR (XOR) basedencryption.

In one embodiment, using a keyed-hash based encryption mechanism, andbased on the shared key information and the “seed (or message)” value inthe BSS color subfield 356, the STAs can calculate the pilot toneallocation index, for example, using a keyed hashing function (e.g.,MD5, SHA-1, or any other hashing function). For example, the STAs canuse a keyed hash message authentication code (HMAC) to calculate thepilot allocation information based on the shared key and the “seed”value in HE-SIG-A1 350, as follows: Pilot Index=HMAC (shared key, seed)mod N; where the pilot index will be used to find the pilot allocationfrom a pre-defined lookup table (which is shared between the AP andSTAs). N can be the size of the lookup table. Note that the legitimateSTAs obtain shared key information during theirassociation/authentication process.

It is understood that the above descriptions are for purposes ofillustration and are not meant to be limiting.

FIG. 4 depicts an illustrative schematic diagram for an enhanced PHYlayer security system, in accordance with one or more exampleembodiments of the present disclosure.

Referring to FIG. 4, there is shown symbols HE-SIG-A1 and HE-SIG-A2pilot and data tone allocations.

In one embodiment, an enhanced PHY layer security system may facilitateXOR-based encryption to randomize the pilot tone allocation for the OFDMsymbol. In that case, Pilot Index=(last 6 bits of shared key ⊕ seed) modN; where ⊕ denotes the bit-wise XOR operation. The XOR operation can bedone within a few clock cycles, minimizing additional processing latencyin the PHY processing. When the receiver receives the seed informationinside the received frame, the receiver will perform similar operations(e.g., using XOR) in order to deduce the pilot index. A hacker would notbe able to deduce the pilot index because the hacker would not haveaccess to the shared key or the specific way the pilot index wascalculated (e.g., using the last six bits of the shared key in thebitwise XOR operation).

In one embodiment, an enhanced PHY layer security system may facilitatethe use of a lookup table for randomizing the pilot tone allocation. Thelookup table may be known by the transmitter and by the receiver. Table1 below shows an example of the pilot tone allocation lookup table for20 MHz PPDU. For example, the transmitter may send the pilot index, andthe receiver may then use that pilot index in order to locate in thetable the actual pilot allocation. For example, if the pilot indextransmitted was 1, the receiver may then use 1 as an index to the tableand determine that the pilot allocation is ±6, ±20. Note that the tableshown below is an example for the purpose of illustration, and differentpilot allocations can be used for randomization. For example, the pilotallocation can be a pre-defined pattern/sequence, e.g., a differentpilot allocation for each OFDM symbol, which provides even moreprotection.

TABLE 1 An example pilot allocation look-up table for 20 MHz PPDU. PilotIndex 0 1 2 3 4 5 Pilot allocation ±5, ±19 ±6, ±20 ±7, ±21 ±8, ±22 ±9,±23 ±10, ±24

In one embodiment, an enhanced PHY layer security system may beconfigured to determine pilot tone index locations for a signaling fieldof the PHY preamble. For example, the signal field may be an HE-SIG-A2,a next-generation signal field, or any other field within the PHYpreamble.

Referring to FIG. 4, there is shown an example of pilot tone allocation(tone index locations) in the HE-SIG-A1 400, which contains informationof the encrypted pilot tone allocation that should be used when decodingHE-SIG-A2 450 in the PHY preamble. The pilot tone allocation forHE-SIG-A1 400 and HE-SIG-A2 450 with the “randomized” pilot toneallocation may be calculated based on the key-hashed value or the pilottone allocation look-up table. In this example, the OFDM pilotsubcarrier for HE-SIG-A1 comprises the conventional pilot tone indexlocations (e.g., pilot tone indexes 401, 402, 403, and 404). These pilottone indexes have actual values of ±21 and ±7.

The OFDM pilot subcarrier for HE-SIG-A2 is shown to be randomized usingone or more of the above methods. Therefore, the pilot tone indexlocations for HE-SIG-A2 are shown to be pilot tone indexes 411, 412,413, and 414. These pilot tone indexes have actual values of ±23 and ±9.Alternatively and/or additionally, the data tone locations can alsorandomized as well. The data tones are shown in these figures as thetones surrounding the pilot tones, except for the DC=0. This may be lessappealing with a convolutional encoder since it would potentially changethe interleaver depth, but when low-density parity-check (LDPC) is usedit provides additional security. It is understood that the abovedescriptions are for purposes of illustration and are not meant to belimiting.

FIG. 5 depicts an illustrative flowchart 500 for an enhanced PHY layersecurity system, in accordance with one or more example embodiments ofthe present disclosure.

Referring to FIG. 5, there is shown an example of devices in accordancewith high-efficiency devices (e.g., 802.11ax) for the behavior of thereceivers when they receive the PHY preamble that contains the encryptedfield.

In one embodiment, an enhanced PHY layer security system may facilitatethat once the STAs find the pilot/data tone allocation (pilot tone indexlocations) based on information in HE-SIG-A1, they use them in the OFDMsymbol de-mapper to decode the next OFDM symbol, for example, HE-SIG-A2.Note that HE-SIG-A1 will be encoded with the conventional pilot/datatone allocation. Therefore, non-legitimate STAs may be able to correctlydecode the HE-SIG-A1, but will fail to decode the HE-SIG-A2. As aresult, the non-legitimate STAs will fail at the CRC (B16-B19) check forHE-SIG-A and send a PHY_RXEND.indication (format violation) to the MACand enter the “End of Wait” state in the PHY receiver state machine.This will halt the processing of the PHY preamble.

At block 502 when an STA (e.g., a user device 120 of FIG. 1) receives aPHY preamble, it may receive an HE-SIG-A1 before receiving theHE-SIG-A2. The STA may decode the HE-SIG-A1 knowing that the pilot toneindex locations are the conventional pilot tone allocations (e.g., basedon the 802.11 standard). The STA may determine a bit (referred to hereinas Pilot Encrypted) which may be located at bit 14 (B14) in thisexample. It should be understood that although bit 14 is used, otheravailable bits may be used to indicate whether the pilot tone indexlocations are encrypted or not.

At block 504, the STA may identify a field (e.g., BSS color) in theHE-SIG-A1. This field may contain the seed value needed to decrypt anext symbol (e.g., HE-SIG-A2). The STA may attract the seed value fromthis field. For example, the BSS color may be found between bit 8 andbit 13 in the HE-SIG-A1. It should be understood that although the BSScolor is used to hold the seed value, other fields may be used tocontain the seed value.

At block 506, using the extracted seed value, the STA may compute thepilot tone index locations using one or more mechanisms. A firstmechanism may be a “keyed-hash” based calculation and a second mechanismmay include using exclusive OR (XOR) based decryption. In the keyed hashbased calculation, for example, the STA can use a keyed hash messageauthentication code (HMAC) to calculate the pilot allocation informationbased on the shared key and the “seed” value in HE-SIG-A1, as follows:Pilot Index=HMAC (shared key, seed) mod N; where the pilot index will beused to find the pilot allocation from a pre-defined lookup table (whichis shared between the AP and STAs). N can be the size of the lookuptable.

At block 508, the STA may find the pilot tone allocation based on thePilot Index and the lookup table. The lookup table may have acorrelation between the Pilot Index and the pilot tone index locations.For example, at Pilot Index 1, the pilot allocations may be ±6, ±20.

At block 510, the STA may configure its OFDM symbol de-mapper based onthe pilot tone allocations determined from the table.

At block 512, the OFDM symbol de-mapper may decode a next OFDM symbol,for example, HE-SIG-A2.

At block 514, the STA may perform a CRC check using the CRC subfield inHE-SIG-A2 to detect errors occurring during data transmission.

At block 516, the STA may determine whether the CRC passed or not. Ifthe CRC fails, this indicates that there were errors in the decodedHE-SIG-A2. If the CRC passes, this indicates that there were no errorsin the decoded HE-SIG-A2.

At block 518, in case the CRC passes, the STA may proceed to decode therest of the frame (e.g., PPDU).

At block 520, in case the CRC failed, the STA may send aPHY_RXEND.indication (format violation) to the MAC and enter the “End ofWait” state in the PHY receiver state machine. This will halt theprocessing of the PHY preamble.

It is understood that the above descriptions are for purposes ofillustration and are not meant to be limiting.

FIG. 6 depicts an illustrative schematic diagram 600 for an enhanced PHYlayer security system, in accordance with one or more exampleembodiments of the present disclosure.

Referring to FIG. 6, there is shown a next generation PPDU that may becomprised of one or more fields. The enhanced PHY layer security systemmay be designed with the following considerations: (1) it facilitatesthat the embodiments for encrypting/randomizing pilot (or data) toneallocation can be implemented at the receiver (e.g., STAs) with lowcomplexity and overhead. The receiver may need to dynamicallyreconfigure the OFDM tone de-mapper configuration based on the lookuptable; (2) while a PHY signaling field (e.g., NG-SIG) design allows onlythe legitimate (targeted) STAs to decode the rest of the PPDU, theNG-SIG field itself is not encrypted, and all the STAs (including theOBSS STAs) can properly defer (and correctly set the network allocationvector (NAV) if needed) based on information in NG-SIG; and (3) theenhanced PHY layer security may provide energy efficiency since theNG-SIG field conveys the BSS identification information (e.g., BSS Colorfield) which allows the OBSS STAs to promptly abort the PHY decodingprocess if the received signal is transmitted from the OBSS AP or STAs.

Referring to FIG. 6, there is shown a simplified example PPDU (e.g.,NG-SIG PPDU 600) frame format for next-generation (NG) Wi-Fi includingan illustrative NG-SIG field. Note, for the next-generation systems inthe new bands, it is very likely that all of these fields outlinedbelow, except the “seed” field, will be required for normalcommunications with the STA. Thus these are not considered overhead, butare presented for completeness since the approach requires theintroduction of a new, yet to be defined NG-SIG field.

In the example of FIG. 6, the NG PPDU 600 is illustrated as consistingof the one or more subfields. For example, training field (s) 602,NG-SIG field 604, more training and/or SIG fields 606, and data field608.

The NG-SIG PPDU 600 may start with training field(s) 602 for packetacquisition, detection, automatic gain control (AGC), time/frequencysynchronization, channel estimation, etc.

The NG-SIG field 604 may be a signaling field that may convey an N-bit“seed” value (e.g., seed subfield 607) which is needed to “decrypt”pilot tone allocation information where the size of the “seed” subfieldcan vary depending on the implementation. The NG-SIG field 604 conveysone or more subfields containing information. For example, the NG-SIGfield 604 may comprise a length subfield 605 (about 12 bits), whichindicates the size of the PPDU (e.g., in terms of bytes). It should benoted that the “length” fields can be used by the OBSS STAs to calculatethe expected transmission (and the total number of OFDM symbols) of thecurrent PPDU. The STAs can assume a fixed rate, (e.g., 6 Mbps) toconvert the length to the expected time. The NG-SIG field 604 maycomprise a BSS Color subfield 609 (about 6 bits), which indicates the“BSS Color” value so that the STAs can differentiate the transmissionsfrom the same BSS from the ones from the OBSSes. It should be noted thatit is important for the STAs to identify the OBSS signal. STAs cannot“decrypt” the pilot tone allocation of the OBSS transmissions becausethey do not have the “pre-shared key (PSK)” information of other BSSes.Upon the detection of the OBSS signal based on the “BSS Color” fields,the STAs should attempt to “decrypt” the pilot tone allocation anddecode the subsequent OFDM symbols in order to save energy. The NG-SIGfield 604 may also include a CRC subfield 611 (about 8 bits), which maybe used to check the integrity of the NG-SIG field 604. If a receiverfails to pass the CRC check, the receiver chain will abort the decodingprocess. The NG-SIG field 604 may also include a tail subfield 613(about 6 bits), which is used to terminate the trellis of theconvolutional decoder in case binary convolutional coding (BCC) is usedto encode the NG-SIG field 604. This tail subfield 613 may not be neededif low-density parity-check (LDPC) is used for the NG-SIG field 604.

The more training and/or SIG Fields 606 may be included because therecould be more training and signaling fields that need to be conveyed tothe receiver (e.g., an STA). The data field 608 may comprise the datapayload.

In one embodiment, an enhanced PHY layer security system may encryptpilot tone allocation based on the “seed” value 607 in the NG-SIG field604. For example, the enhanced PHY layer security system may use akeyed-hash based encryption. In that case and based on the pre-sharedkey (PSK) information and the “seed (or message)” value 607 in NG-SIGfield 604, the STAs can calculate the pilot tone allocation index, forexample, using the keyed hashing function, e.g., MD5, SHA-1, etc. Forexample, the STAs can use a keyed-hash message authentication code(HMAC) to calculate the pilot allocation information based on the sharedkey and the “seed” value 607, as follows: Pilot Index=HMAC (shared key,seed) mod N, where the Pilot Index will be used to find the pilotallocation from a pre-defined lookup table (which is shared between theAP and STAs). N can be the size of the lookup table. Note thatlegitimate STAs obtain shared key information during theirassociation/authentication process. Alternatively, pilot tone allocationcan be computed in a lightweight fashion, e.g., using XOR (Exclusive OR)operation. Pilot Index=(last N bits of shared key ⊕ seed) mod N, where ⊕denotes the bit-wise XOR operation. The XOR operation can be done withina few clock cycles, minimizing additional processing latency in the PHYprocessing.

In one embodiment, an enhanced PHY layer security system may encrypt ascrambler seed. For example, the above described methods can be alsoused to randomize the scrambler seed at the receiver. For example, in802.11ac/ax systems, receivers can extract the scrambler seed from theCH_BANDWIDTH_IN_NOT_HT and DYN_BANDWIDTH_IN_NOT_HT parameters, as shownin Table 1 below. Encrypting the scrambler seed can provide anadditional layer of protection.

Table 1: Contents of the first 7 bits of the scrambling sequence.

TABLE 1 Contents of the first 7 bits of the scrambling sequence. First 7bits of scrambling sequence B0 B3 B4 B5 B6 Parameter Condition

TXVECTOR CH_BAND- 5-bit pseudorandom nonzero integer if CH_BAND-WIDTH_IN_NON_HT CH_BANDWIDTH_IN_NON_HT equals CBW20 WIDTH_IN_NON_HT ispresent and and a 5-bit pseudorandom integer otherwise DYN_BAND-WIDTH_IN_NOT_HT is not present in TXVECTOR TXVECTOR CH_BAND- 4-bitpseudorandom DYN_BAND- WIDTH_IN_NON_HT nonzero integer ifWIDTH_IN_NON_HT is present and CH_BAND- DYN_BAND- WIDTH_IN_NON_HTWIDTH_IN_NOT_HT equals CBW20 and is present in DYN_BAND- TXVECTORWIDTH_IN_NON_HT equals Static, and a 4-bit pseudorandom integerotherwise RXVECTOR CH_BAND- — DYN_BAND- CbwInNonHtTemp isWIDTH_IN_NON_HT WIDTH_IN_NON_HT set to this subfield of and DYN_BAND-first 7 bits of WIDTH_IN_NOT_HT scrambling sequence; are present in thenRXVECTOR CbwInNonHtTemp is mapped according to Table 17-9 to CH_BAND-WIDTH_IN_NON_HT

In one embodiment, when an STA (e.g., a user device 120 of FIG. 1)receives a PHY packet, it may calculate the expected transmission time(and the number of OFDM symbols) based on the “length” subfields inNG-SIG field. The STA may check the value of the “BSS Color” subfieldand match it with its own BSS Color to identify the source of thesignal, i.e., same BSS versus other BSSes. If it is an overlapping basicservice set (OBSS) signal, then the STA may perform the CRC check andstop decoding the rest of the PPDU. The STA may then set the NAV valuebased on the “length” fields to properly defer medium access. If it isthe same BSS signal, then the STA may perform a CRC check and maycompute the pilot tone allocation index (e.g., Pilot Index) based on theshared key and the seed value in the NG-SIG field using one or moremethods (e.g., HMAC or XOR). The STA may then use the calculated PilotIndex to find (e.g., via the lookup table) the pilot toneallocation/pattern used for the rest of the OFDM symbols within the samePPDU. It should be noted that unregistered/unassociated STAs do not havethe “shared key” information. Therefore, they cannot correctly decryptand compute the Pilot Index information even with the “seed” value inthe NG-SIG field, which prevents them from decoding the rest of the PPDUincluding other signaling fields/information and data payload. It isunderstood that the above descriptions are for purposes of illustrationand are not meant to be limiting.

FIG. 7A illustrates a flow diagram of an illustrative process 700 for anillustrative enhanced PHY layer security system, in accordance with oneor more example embodiments of the present disclosure.

At block 702, a device (e.g., the user device(s) 120 and/or the AP 102of FIG. 1) may determine a physical layer (PHY) frame to be sent toanother device (e.g., the user device(s) 120 and/or the AP 102 of FIG.1). For example, an AP may want to send a PHY frame to an STA (e.g., auser device 120 of FIG. 1).

At block 704, the device may identify an encryption seed sequence to beused for encrypting a first portion of the PHY frame. For example, theAP may “encrypt” a certain part of the PHY frame (e.g., HE-SIG-A orNG-SIG fields) so that only legitimate STAs (those which are associatedwith the AP) can decode the PHY frame and proceed to decode the MACheader and data payload. The PHY frame will be “encrypted” using asecure key shared between the AP and STAs during the associationprocedure. This will prevent non-legitimate STAs (or malicious devices)from correctly decoding the PHY frame and detecting the frame type(e.g., TF).

At block 706, the device may include an indication of the encryptionseed sequence in a first field of one or more fields of the PHY frame.For example, in order for legitimate STAs to compute the pilot toneallocation of a next symbol, the AP may use the “BSS Color” subfield.The AP may set the value of a predetermined bit (e.g., “Reserved”) to“1” to indicate that the BSS color subfield contains the “seed” valuefor computing pilot mapping information for decoding one or more nextsymbols/fields in the PHY frame or PPDU.

At block 708, the device may encode the first portion of the PHY framesusing the encryption seed sequence. For example, the AP may use the seedvalue found in the BSS color subfield to encode a signaling field (e.g.,HE-SIG-A2) or additional fields in a PPDU. During the encoding of suchfields, the pilot tones may be inserted at randomized locations based onthe seed value. This way, only receivers that have the correct pilotlocations would be able to decode these fields when they are received.

At block 710, the device may cause to send the PHY frame to the stationdevice. For example, the AP may send the PHY frame to the STA. If thisframe gets intercepted by a hacker, the hacker may not be able to decodethe portion of the frame that was encoded using the above describedprocedure.

It is understood that the above descriptions are for purposes ofillustration and are not meant to be limiting.

FIG. 7B illustrates a flow diagram of an illustrative process 750 for anillustrative enhanced PHY layer security system, in accordance with oneor more example embodiments of the present disclosure.

At block 752, a device (e.g., the user device(s) 120 and/or the AP 102of FIG. 1) may identify a physical layer (PHY) frame received from adevice. The PHY frame may be legitimate or a fake frame. For example, ahacker may have intercepted the frame and altered it in such a way thatit may cause issues on the device when the device is decoding thatframe.

At block 754, the device may determine a first bit in a first field ofthe PHY frame to indicate an encryption seed sequence included in asecond field of one or more fields of the PHY frame. For example, theuser device 120 of FIG. 1 may analyze the received symbols associatedwith one or more fields of the frame. The user device may extract a bitthat may be located in a reserve bit in a first field of the PHY frame(e.g., in the HE-SIG-A1). The bit may be identified as a “pilotencrypted” subfield. For example, looking at HE-SIG-A1 350 in FIG. 3B,the pilot encrypted subfield 358 may be used by the AP to indicatewhether there is encryption or not.

At block 756, the device may identify the encryption seed sequence fromthe second field. In order for legitimate user devices to compute thepilot tone allocation of a next symbol, the AP may use the “BSS Color”subfield. The AP may set the value of a predetermined bit (e.g.,“Reserved”) to “1” to indicate that the BSS color subfield contains the“seed” value for computing pilot mapping information for decoding one ormore next symbols/fields in the PHY frame or PPDU.

At block 758, the device may determine pilot tone index locationsassociated with a third field of the PHY frame based on the encryptionseed sequence. The user device may determine the pilot tone allocationfor other fields in the PHY frame based on the “seed” value included inthe BSS color subfield by employing or more mechanisms. There can bemultiple ways to randomize the pilot tone allocation for the OFDM symbolof other fields. For example, a first mechanism may be a “keyed-hash”based encryption and a second mechanism may include an exclusive OR(XOR) based encryption. For example, the user device may use akeyed-hash message authentication code (HMAC) to calculate the pilotallocation information based on the shared key and the “seed” value inthe HE-SIG-A or NG-SIG fields, as follows: Pilot Index=HMAC (shared key,seed) mod N; where the pilot index will be used to find the pilotallocation from a pre-defined lookup table (which is shared between theAP and user devices). N can be the size of the lookup table. Note thatlegitimate user devices obtain shared key information during theirassociation/authentication process.

At block 760, the device may decode the third field based on the pilottone index locations. Once the user device finds the pilot/data toneallocation (pilot tone index locations) based on information inHE-SIG-A1 or NG-SIG, the user device may use that information in theOFDM symbol de-mapper to decode the next OFDM symbol, for example,HE-SIG-A2 or other symbols. Note that HE-SIG-A1 or NG-SIG will beencoded with the conventional pilot/data tone allocation. Therefore,non-legitimate user devices may be able to correctly decode theHE-SIG-A1 or the NG-SIG, but will fail to decode the nextsymbols/fields. As a result, the non-legitimate user devices will failat the CRC check and will send a PHY_RXEND.indication (format violation)to the MAC and enter the “End of Wait” state in the PHY receiver statemachine. This will halt the processing of the PHY preamble. It isunderstood that the above descriptions are for purposes of illustrationand are not meant to be limiting.

FIG. 8 shows a functional diagram of an exemplary communication station800 in accordance with some embodiments. In one embodiment, FIG. 8illustrates a functional block diagram of a communication station thatmay be suitable for use as an AP 102 (FIG. 1) or a user device 120(FIG. 1) in accordance with some embodiments. The communication station800 may also be suitable for use as a handheld device, a mobile device,a cellular telephone, a smartphone, a tablet, a netbook, a wirelessterminal, a laptop computer, a wearable computer device, a femtocell, ahigh data rate (HDR) subscriber station, an access point, an accessterminal, or other personal communication system (PCS) device.

The communication station 800 may include communications circuitry 802and a transceiver 810 for transmitting and receiving signals to and fromother communication stations using one or more antennas 801. Thetransceiver 810 may be a device comprising both a transmitter and areceiver that are combined and share common circuitry (e.g.,communications circuitry 802). The communications circuitry 802 mayinclude amplifiers, filters, mixers, analog to digital and/or digital toanalog converters. The transceiver 810 may transmit and receive analogor digital signals. The transceiver 810 may allow reception of signalsduring transmission periods. This mode is known as full-duplex, and mayrequire the transmitter and receiver to operate on different frequenciesto minimize interference between the transmitted signal and the receivedsignal. The transceiver 810 may operate in a half-duplex mode, where thetransceiver 810 may transmit or receive signals in one direction at atime.

The communications circuitry 802 may include circuitry that can operatethe physical layer (PHY) communications and/or media access control(MAC) communications for controlling access to the wireless medium,and/or any other communications layers for transmitting and receivingsignals. The communication station 800 may also include processingcircuitry 806 and memory 808 arranged to perform the operationsdescribed herein. In some embodiments, the communications circuitry 802and the processing circuitry 806 may be configured to perform operationsdetailed in FIGS. 1-7.

In accordance with some embodiments, the communications circuitry 802may be arranged to contend for a wireless medium and configure frames orpackets for communicating over the wireless medium. The communicationscircuitry 802 may be arranged to transmit and receive signals. Thecommunications circuitry 802 may also include circuitry formodulation/demodulation, upconversion/downconversion, filtering,amplification, etc. In some embodiments, the processing circuitry 806 ofthe communication station 800 may include one or more processors. Inother embodiments, two or more antennas 801 may be coupled to thecommunications circuitry 802 arranged for sending and receiving signals.The memory 808 may store information for configuring the processingcircuitry 806 to perform operations for configuring and transmittingmessage frames and performing the various operations described herein.The memory 808 may include any type of memory, including non-transitorymemory, for storing information in a form readable by a machine (e.g., acomputer). For example, the memory 808 may include a computer-readablestorage device, read-only memory (ROM), random-access memory (RAM),magnetic disk storage media, optical storage media, flash-memory devicesand other storage devices and media.

In some embodiments, the communication station 800 may be part of aportable wireless communication device, such as a personal digitalassistant (PDA), a laptop or portable computer with wirelesscommunication capability, a web tablet, a wireless telephone, asmartphone, a wireless headset, a pager, an instant messaging device, adigital camera, an access point, a television, a medical device (e.g., aheart rate monitor, a blood pressure monitor, etc.), a wearable computerdevice, or another device that may receive and/or transmit informationwirelessly.

In some embodiments, the communication station 800 may include one ormore antennas 801. The antennas 801 may include one or more directionalor omnidirectional antennas, including, for example, dipole antennas,monopole antennas, patch antennas, loop antennas, microstrip antennas,or other types of antennas suitable for transmission of RF signals. Insome embodiments, instead of two or more antennas, a single antenna withmultiple apertures may be used. In these embodiments, each aperture maybe considered a separate antenna. In some multiple-input multiple-output(MIMO) embodiments, the antennas may be effectively separated forspatial diversity and the different channel characteristics that mayresult between each of the antennas and the antennas of a transmittingstation.

In some embodiments, the communication station 800 may include one ormore of a keyboard, a display, a non-volatile memory port, multipleantennas, a graphics processor, an application processor, speakers, andother mobile device elements. The display may be an LCD screen includinga touch screen.

Although the communication station 800 is illustrated as having severalseparate functional elements, two or more of the functional elements maybe combined and may be implemented by combinations ofsoftware-configured elements, such as processing elements includingdigital signal processors (DSPs), and/or other hardware elements. Forexample, some elements may include one or more microprocessors, DSPs,field-programmable gate arrays (FPGAs), application specific integratedcircuits (ASICs), radio-frequency integrated circuits (RFICs) andcombinations of various hardware and logic circuitry for performing atleast the functions described herein. In some embodiments, thefunctional elements of the communication station 800 may refer to one ormore processes operating on one or more processing elements.

Certain embodiments may be implemented in one or a combination ofhardware, firmware, and software. Other embodiments may also beimplemented as instructions stored on a computer-readable storagedevice, which may be read and executed by at least one processor toperform the operations described herein. A computer-readable storagedevice may include any non-transitory memory mechanism for storinginformation in a form readable by a machine (e.g., a computer). Forexample, a computer-readable storage device may include read-only memory(ROM), random-access memory (RAM), magnetic disk storage media, opticalstorage media, flash-memory devices, and other storage devices andmedia. In some embodiments, the communication station 800 may includeone or more processors and may be configured with instructions stored ona computer-readable storage device memory.

FIG. 9 illustrates a block diagram of an example of a machine 900 orsystem upon which any one or more of the techniques (e.g.,methodologies) discussed herein may be performed. In other embodiments,the machine 900 may operate as a standalone device or may be connected(e.g., networked) to other machines. In a networked deployment, themachine 900 may operate in the capacity of a server machine, a clientmachine, or both in server-client network environments. In an example,the machine 900 may act as a peer machine in peer-to-peer (P2P) (orother distributed) network environments. The machine 900 may be apersonal computer (PC), a tablet PC, a set-top box (STB), a personaldigital assistant (PDA), a mobile telephone, a wearable computer device,a web appliance, a network router, a switch or bridge, or any machinecapable of executing instructions (sequential or otherwise) that specifyactions to be taken by that machine, such as a base station. Further,while only a single machine is illustrated, the term “machine” shallalso be taken to include any collection of machines that individually orjointly execute a set (or multiple sets) of instructions to perform anyone or more of the methodologies discussed herein, such as cloudcomputing, software as a service (SaaS), or other computer clusterconfigurations.

Examples, as described herein, may include or may operate on logic or anumber of components, modules, or mechanisms. Modules are tangibleentities (e.g., hardware) capable of performing specified operationswhen operating. A module includes hardware. In an example, the hardwaremay be specifically configured to carry out a specific operation (e.g.,hardwired). In another example, the hardware may include configurableexecution units (e.g., transistors, circuits, etc.) and a computerreadable medium containing instructions where the instructions configurethe execution units to carry out a specific operation when in operation.The configuring may occur under the direction of the executions units ora loading mechanism. Accordingly, the execution units arecommunicatively coupled to the computer-readable medium when the deviceis operating. In this example, the execution units may be a member ofmore than one module. For example, under operation, the execution unitsmay be configured by a first set of instructions to implement a firstmodule at one point in time and reconfigured by a second set ofinstructions to implement a second module at a second point in time.

The machine (e.g., computer system) 900 may include a hardware processor902 (e.g., a central processing unit (CPU), a graphics processing unit(GPU), a hardware processor core, or any combination thereof), a mainmemory 904 and a static memory 906, some or all of which may communicatewith each other via an interlink (e.g., bus) 908. The machine 900 mayfurther include a power management device 932, a graphics display device910, an alphanumeric input device 912 (e.g., a keyboard), and a userinterface (UI) navigation device 914 (e.g., a mouse). In an example, thegraphics display device 910, alphanumeric input device 912, and UInavigation device 914 may be a touch screen display. The machine 900 mayadditionally include a storage device (i.e., drive unit) 916, a signalgeneration device 918 (e.g., a speaker), an enhanced PHY layer securitydevice 919, a network interface device/transceiver 920 coupled toantenna(s) 930, and one or more sensors 928, such as a globalpositioning system (GPS) sensor, a compass, an accelerometer, or othersensor. The machine 900 may include an output controller 934, such as aserial (e.g., universal serial bus (USB), parallel, or other wired orwireless (e.g., infrared (IR), near field communication (NFC), etc.)connection to communicate with or control one or more peripheral devices(e.g., a printer, a card reader, etc.)).

The storage device 916 may include a machine readable medium 922 onwhich is stored one or more sets of data structures or instructions 924(e.g., software) embodying or utilized by any one or more of thetechniques or functions described herein. The instructions 924 may alsoreside, completely or at least partially, within the main memory 904,within the static memory 906, or within the hardware processor 902during execution thereof by the machine 900. In an example, one or anycombination of the hardware processor 902, the main memory 904, thestatic memory 906, or the storage device 916 may constitutemachine-readable media.

The enhanced PHY layer security device 919 may carry out or perform anyof the operations and processes (e.g., processes 700 and 750) describedand shown above. For example, the enhanced PHY layer security device 919may be configured to “encrypt” a certain part of the PHY preamble (e.g.,HE-SIG-A) so that only legitimate STAs (those which are associated withthe AP) can decode the PHY preamble and proceed to decode the MAC headerand data payload. The PHY preamble will be “encrypted” using a securekey shared between the AP and STAs during an association procedure. Thiswill prevent non-legitimate STAs (or malicious devices) from correctlydecoding the PHY preamble and detecting the frame type (e.g., TF).

The enhanced PHY layer security device 919 may encrypt/randomizeorthogonal frequency-division multiplexing (OFDM) pilot tone allocationsthroughout the PPDU so that only legitimate STAs with the pre-shared key(PSK) (e.g., password, paraphrase, etc.) information can correctlyidentify the pilot tone allocations to decode the entire PPDU. Thisapproach can also be extended to the data tones as well, but thisdiscussion will focus on the pilot tones. Both approaches would provideeven more protection. However, implementing the pilot tone protectionprovides significant protection, and minimizes hardware design changesfrom previous Wi-Fi standards. For this, a special signaling (SIG)field, called Next-Generation (NG)-SIG, may be part of the greenfieldPHY design for next-generation Wi-Fi. This NG-SIG field may include a“seed” information field where the value of the “seed” field can be usedby legitimate STAs to correctly “decrypt” the OFDM pilot (or data) toneallocation for the subsequent OFDM symbols (including additional PHYpreambles and data payload). The decryption requires the shared keyinformation exchanged between the AP and legitimate STAs during anassociation process over a secure channel. Therefore unintended STAs(e.g., hackers/attackers) cannot correctly decrypt the pilot locationand will fail to decode the OFDM symbols following the NG-SIG.

The enhanced PHY layer security device 919 may provide a new PHY-layerprotection which will be the first line of defense in the Wi-Fi stack.This will make next generation Wi-Fi systems much more secure, robustand privacy-friendly compared to today's Wi-Fi systems. This isespecially the case when fast advances in machine-/deep-learning areconsidered and big data analytics, which enable hackers to infer moreprivate information with less amount of low-level (PHY layer) data.

It is understood that the above are only a subset of what the enhancedPHY layer security device 919 may be configured to perform and thatother functions included throughout this disclosure may also beperformed by the enhanced PHY layer security device 919.

While the machine-readable medium 922 is illustrated as a single medium,the term “machine-readable medium” may include a single medium ormultiple media (e.g., a centralized or distributed database, and/orassociated caches and servers) configured to store the one or moreinstructions 924.

Various embodiments may be implemented fully or partially in softwareand/or firmware. This software and/or firmware may take the form ofinstructions contained in or on a non-transitory computer-readablestorage medium. Those instructions may then be read and executed by oneor more processors to enable performance of the operations describedherein. The instructions may be in any suitable form, such as but notlimited to source code, compiled code, interpreted code, executablecode, static code, dynamic code, and the like. Such a computer-readablemedium may include any tangible non-transitory medium for storinginformation in a form readable by one or more computers, such as but notlimited to read only memory (ROM); random access memory (RAM); magneticdisk storage media; optical storage media; a flash memory, etc.

The term “machine-readable medium” may include any medium that iscapable of storing, encoding, or carrying instructions for execution bythe machine 900 and that cause the machine 900 to perform any one ormore of the techniques of the present disclosure, or that is capable ofstoring, encoding, or carrying data structures used by or associatedwith such instructions. Non-limiting machine-readable medium examplesmay include solid-state memories and optical and magnetic media. In anexample, a massed machine-readable medium includes a machine-readablemedium with a plurality of particles having resting mass. Specificexamples of massed machine-readable media may include non-volatilememory, such as semiconductor memory devices (e.g., electricallyprogrammable read-only memory (EPROM), or electrically erasableprogrammable read-only memory (EEPROM)) and flash memory devices;magnetic disks, such as internal hard disks and removable disks;magneto-optical disks; and CD-ROM and DVD-ROM disks.

The instructions 924 may further be transmitted or received over acommunications network 926 using a transmission medium via the networkinterface device/transceiver 920 utilizing any one of a number oftransfer protocols (e.g., frame relay, internet protocol (IP),transmission control protocol (TCP), user datagram protocol (UDP),hypertext transfer protocol (HTTP), etc.). Example communicationsnetworks may include a local area network (LAN), a wide area network(WAN), a packet data network (e.g., the Internet), mobile telephonenetworks (e.g., cellular networks), plain old telephone (POTS) networks,wireless data networks (e.g., Institute of Electrical and ElectronicsEngineers (IEEE) 802.11 family of standards known as Wi-Fi®, IEEE 802.16family of standards known as WiMax®), IEEE 802.15.4 family of standards,and peer-to-peer (P2P) networks, among others. In an example, thenetwork interface device/transceiver 920 may include one or morephysical jacks (e.g., Ethernet, coaxial, or phone jacks) or one or moreantennas to connect to the communications network 926. In an example,the network interface device/transceiver 920 may include a plurality ofantennas to wirelessly communicate using at least one of single-inputmultiple-output (SIMO), multiple-input multiple-output (MIMO), ormultiple-input single-output (MISO) techniques. The term “transmissionmedium” shall be taken to include any intangible medium that is capableof storing, encoding, or carrying instructions for execution by themachine 900 and includes digital or analog communications signals orother intangible media to facilitate communication of such software. Theoperations and processes described and shown above may be carried out orperformed in any suitable order as desired in various implementations.Additionally, in certain implementations, at least a portion of theoperations may be carried out in parallel. Furthermore, in certainimplementations, less than or more than the operations described may beperformed.

The word “exemplary” is used herein to mean “serving as an example,instance, or illustration.” Any embodiment described herein as“exemplary” is not necessarily to be construed as preferred oradvantageous over other embodiments. The terms “computing device,” “userdevice,” “communication station,” “station,” “handheld device,” “mobiledevice,” “wireless device” and “user equipment” (UE) as used hereinrefers to a wireless communication device such as a cellular telephone,a smartphone, a tablet, a netbook, a wireless terminal, a laptopcomputer, a femtocell, a high data rate (HDR) subscriber station, anaccess point, a printer, a point of sale device, an access terminal, orother personal communication system (PCS) device. The device may beeither mobile or stationary.

As used within this document, the term “communicate” is intended toinclude transmitting, or receiving, or both transmitting and receiving.This may be particularly useful in claims when describing theorganization of data that is being transmitted by one device andreceived by another, but only the functionality of one of those devicesis required to infringe the claim. Similarly, the bidirectional exchangeof data between two devices (both devices transmit and receive duringthe exchange) may be described as “communicating,” when only thefunctionality of one of those devices is being claimed. The term“communicating” as used herein with respect to a wireless communicationsignal includes transmitting the wireless communication signal and/orreceiving the wireless communication signal. For example, a wirelesscommunication unit, which is capable of communicating a wirelesscommunication signal, may include a wireless transmitter to transmit thewireless communication signal to at least one other wirelesscommunication unit, and/or a wireless communication receiver to receivethe wireless communication signal from at least one other wirelesscommunication unit.

As used herein, unless otherwise specified, the use of the ordinaladjectives “first,” “second,” “third,” etc., to describe a commonobject, merely indicates that different instances of like objects arebeing referred to and are not intended to imply that the objects sodescribed must be in a given sequence, either temporally, spatially, inranking, or in any other manner.

The term “access point” (AP) as used herein may be a fixed station. Anaccess point may also be referred to as an access node, a base station,an evolved node B (eNodeB), or some other similar terminology known inthe art. An access terminal may also be called a mobile station, userequipment (UE), a wireless communication device, or some other similarterminology known in the art. Embodiments disclosed herein generallypertain to wireless networks. Some embodiments may relate to wirelessnetworks that operate in accordance with one of the IEEE 802.11standards.

Some embodiments may be used in conjunction with various devices andsystems, for example, a personal computer (PC), a desktop computer, amobile computer, a laptop computer, a notebook computer, a tabletcomputer, a server computer, a handheld computer, a handheld device, apersonal digital assistant (PDA) device, a handheld PDA device, anon-board device, an off-board device, a hybrid device, a vehiculardevice, a non-vehicular device, a mobile or portable device, a consumerdevice, a non-mobile or non-portable device, a wireless communicationstation, a wireless communication device, a wireless access point (AP),a wired or wireless router, a wired or wireless modem, a video device,an audio device, an audio-video (A/V) device, a wired or wirelessnetwork, a wireless area network, a wireless video area network (WVAN),a local area network (LAN), a wireless LAN (WLAN), a personal areanetwork (PAN), a wireless PAN (WPAN), and the like.

Some embodiments may be used in conjunction with one way and/or two-wayradio communication systems, cellular radio-telephone communicationsystems, a mobile phone, a cellular telephone, a wireless telephone, apersonal communication system (PCS) device, a PDA device whichincorporates a wireless communication device, a mobile or portableglobal positioning system (GPS) device, a device which incorporates aGPS receiver or transceiver or chip, a device which incorporates an RFIDelement or chip, a multiple-input multiple-output (MIMO) transceiver ordevice, a single-input multiple-output (SIMO) transceiver or device, amultiple-input single-output (MISO) transceiver or device, a devicehaving one or more internal antennas and/or external antennas, digitalvideo broadcast (DVB) devices or systems, multi-standard radio devicesor systems, a wired or wireless handheld device, e.g., a smartphone, awireless application protocol (WAP) device, or the like.

Some embodiments may be used in conjunction with one or more types ofwireless communication signals and/or systems following one or morewireless communication protocols, for example, radio frequency (RF),infrared (IR), frequency-division multiplexing (FDM), orthogonal FDM(OFDM), time-division multiplexing (TDM), time-division multiple access(TDMA), extended TDMA (E-TDMA), general packet radio service (GPRS),extended GPRS, code-division multiple access (CDMA), wideband CDMA(WCDMA), CDMA 2000, single-carrier CDMA, multi-carrier CDMA,multi-carrier modulation (MDM), discrete multi-tone (DMT), Bluetooth®,global positioning system (GPS), Wi-Fi, Wi-Max, ZigBee, ultra-wideband(UWB), global system for mobile communications (GSM), 2G, 2.5G, 3G,3.5G, 4G, fifth generation (5G) mobile networks, 3GPP, long termevolution (LTE), LTE advanced, enhanced data rates for GSM Evolution(EDGE), or the like. Other embodiments may be used in various otherdevices, systems, and/or networks.

Example 1 may include a device comprising memory and processingcircuitry configured to: determine a physical layer (PHY) frame to besent to a station device; identify an encryption seed sequence to beused for encrypting a first portion of the PHY frame; include anindication of the encryption seed sequence in a first field of the PHYframe; encode the first portion of the PHY frame using the encryptionseed sequence; and cause to send the PHY frame to the station device.

Example 2 may include the device of example 1 and/or some other exampleherein, wherein the first portion may be a signaling field of the PHYframe.

Example 3 may include the device of example 2 and/or some other exampleherein, wherein the signaling field of the PHY frame may include atleast a high-efficiency signal A (HE-SIG-A) field or a next-generationWi-Fi signal field (NG-SIG).

Example 4 may include the device of example 1 and/or some other exampleherein, wherein the memory and the processing circuitry are furtherconfigured to cause to set a bit in a second field associated with thefirst field, wherein the bit indicates that pilot tone index locationsof the first portion of the PHY frame are encrypted.

Example 5 may include the device of example 4 and/or some other exampleherein, wherein the processing circuitry may be further configured tocause to send a shared key information associated with encrypting thepilot tone index locations.

Example 6 may include the device of example 4 and/or some other exampleherein, wherein the memory and the processing circuitry are furtherconfigured to determine a pilot index associated with a lookup table forthe pilot tone index locations.

Example 7 may include the device of example 1 and/or some other exampleherein, wherein the memory and the processing circuitry are furtherconfigured to determine the pilot tone index locations based onperforming a bitwise exclusive OR operation.

Example 8 may include the device of example 4 and/or some other exampleherein, wherein the memory and the processing circuitry are furtherconfigured to determine the pilot tone index locations are encryptedusing a keyed-hash message authentication code.

Example 9 may include the device of example 1 and/or some other exampleherein, wherein the first field may be a basic service set (BSS) colorfield of the PHY frame.

Example 10 may include the device of example 1 and/or some other exampleherein, wherein the memory and the processing circuitry are furtherconfigured to include the encryption seed sequence in the first field ofthe PHY frame.

Example 11 may include the device of example 1 and/or some other exampleherein, further comprising a transceiver configured to transmit andreceive wireless signals.

Example 12 may include the device of example 11 and/or some otherexample herein, further comprising one or more antennas coupled to thetransceiver.

Example 13 may include a non-transitory computer-readable medium storingcomputer-executable instructions which when executed by one or moreprocessors result in performing operations comprising: identifying aphysical layer (PHY) frame received from a device; determining a firstbit in a first field of the PHY frame to indicate an encryption seedsequence included in a second field the PHY frame; identifying theencryption seed sequence from the second field; determining pilot toneindex locations associated with a third field of the PHY frame based onthe encryption seed sequence; and decoding the third field based on thepilot tone index locations.

Example 14 may include the non-transitory computer-readable medium ofexample 13 and/or some other example herein, wherein the first field maybe a signaling field included in the PHY frame.

Example 15 may include the non-transitory computer-readable medium ofexample 14 and/or some other example herein, wherein the signaling fieldmay be a high-efficiency signal A (HE-SIG-A) field or a next-generationWi-Fi signal field (NG-SIG).

Example 16 may include the non-transitory computer-readable medium ofexample 13 and/or some other example herein, wherein determining thefirst bit further indicates that the pilot tone index locations of afirst portion of the PHY frame are encrypted.

Example 17 may include the non-transitory computer-readable medium ofexample 13 and/or some other example herein, wherein the operationsfurther comprise computing the pilot tone index locations using akeyed-hash message authentication code (HMAC), wherein an input to theHMAC may include at least one of a shared key and the encrypting seedsequence.

Example 18 may include the non-transitory computer-readable medium ofexample 17 and/or some other example herein, wherein the shared key maybe shared during association with the device.

Example 19 may include the non-transitory computer-readable medium ofexample 13 and/or some other example herein, wherein the operationsfurther comprise determining the pilot tone index locations using alookup table using a pilot tone index included in the PHY frame.

Example 20 may include the non-transitory computer-readable medium ofexample 13 and/or some other example herein, wherein the operationsfurther comprise performing a cyclic redundancy code (CRC) check afterdecoding the third field of the PHY frame.

Example 21 may include a method comprising: determining, by one or moreprocessors, a physical layer (PHY) frame to be sent to a station device;identifying an encryption seed sequence to be used for encrypting afirst portion of the PHY frame; including an indication of theencryption seed sequence in a first field of the PHY frame; encoding thefirst portion of the PHY frame using the encryption seed sequence; andcausing to send the PHY frame to the station device.

Example 22 may include the method of example 21 and/or some otherexample herein, wherein the first portion may be a signaling field ofthe PHY frame.

Example 23 may include the method of example 22 and/or some otherexample herein, wherein the signaling field of the PHY frame may includeat least a high efficiency signal A (HE-SIG-A) field or anext-generation Wi-Fi signal field (NG-SIG).

Example 24 may include the method of example 21 and/or some otherexample herein, further comprising causing to set a bit in a secondfield associated with the first field, wherein the bit indicates thatpilot tone index locations of the first portion of the PHY frame areencrypted

Example 25 may include the method of example 24 and/or some otherexample herein, further comprising causing to send a shared keyinformation associated with encrypting the pilot tone index locations.

Example 26 may include the method of example 24 and/or some otherexample herein, further comprising determining a pilot index associatedwith a lookup table for the pilot tone index locations.

Example 27 may include the method of example 21 and/or some otherexample herein, further comprising determining the pilot tone indexlocations based on performing a bitwise exclusive OR operation.

Example 28 may include the method of example 24 and/or some otherexample herein, further comprising determining the pilot tone indexlocations are encrypted using a keyed-hash message authentication code.

Example 29 may include the method of example 21 and/or some otherexample herein, wherein the first field may be a basic service set (BSS)color field of the PHY frame.

Example 30 may include the method of example 21 and/or some otherexample herein, further comprising including the encryption seedsequence in the first field of the PHY frame.

Example 31 may include an apparatus comprising means for performing amethod as claimed in any one of examples 21-30.

Example 32 may include a system comprising at least one memory devicehaving programmed instruction that, in response to execution, cause atleast one processor to perform the method of any one of examples 21-30.

Example 33 may include a machine readable medium including code, whenexecuted, to cause a machine to perform the method of any one ofexamples 21-30.

Example 34 may include a non-transitory computer-readable medium storingcomputer-executable instructions that when executed by one or moreprocessors result in performing operations comprising: determining aphysical layer (PHY) frame to be sent to a station device; identifyingan encryption seed sequence to be used for encrypting a first portion ofthe PHY frame; including an indication of the encryption seed sequencein a first field of the PHY frame; encoding the first portion of the PHYframe using the encryption seed sequence; and causing to send the PHYframe to the station device.

Example 35 may include the non-transitory computer-readable medium ofexample 34 and/or some other example herein, wherein the first portionmay be a signaling field of the PHY frame.

Example 36 may include the non-transitory computer-readable medium ofexample 35 and/or some other example herein, wherein the signaling fieldof the PHY frame may include at least a high-efficiency signal A(HE-SIG-A) field or a next-generation Wi-Fi signal field (NG-SIG).

Example 37 may include the non-transitory computer-readable medium ofexample 34 and/or some other example herein, wherein the operationsfurther comprise causing to set a bit in a second field associated withthe first field, wherein the bit indicates that pilot tone indexlocations of the first portion of the PHY frame are encrypted.

Example 38 may include the non-transitory computer-readable medium ofexample 37 and/or some other example herein, wherein the operationsfurther comprise causing to send a shared key information associatedwith encrypting the pilot tone index locations.

Example 39 may include the non-transitory computer-readable medium ofexample 37 and/or some other example herein, wherein the operationsfurther comprise determining a pilot index associated with a lookuptable for the pilot tone index locations.

Example 40 may include the non-transitory computer-readable medium ofexample 34 and/or some other example herein, wherein the operationsfurther comprise determining the pilot tone index locations based onperforming a bitwise exclusive OR operation.

Example 41 may include the non-transitory computer-readable medium ofexample 37 and/or some other example herein, wherein the operationsfurther comprise determining the pilot tone index locations areencrypted using a keyed-hash message authentication code.

Example 42 may include the non-transitory computer-readable medium ofexample 34 and/or some other example herein, wherein the first field maybe a basic service set (BSS) color field of the PHY frame.

Example 43 may include the non-transitory computer-readable medium ofexample 34 and/or some other example herein, wherein the operationsfurther comprise including the encryption seed sequence in the firstfield of the PHY frame.

Example 44 may include an apparatus comprising means for determining aphysical layer (PHY) frame to be sent to a station device; means foridentifying an encryption seed sequence to be used for encrypting afirst portion of the PHY frame; means for including an indication of theencryption seed sequence in a first field of the PHY frame; means forencoding the first portion of the PHY frame using the encryption seedsequence; and means for causing to send the PHY frame to the stationdevice.

Example 45 may include the apparatus of example 44 and/or some otherexample herein, wherein the first portion may be a signaling field ofthe PHY frame.

Example 46 may include the apparatus of example 45 and/or some otherexample herein, wherein the signaling field of the PHY frame may includeat least a high-efficiency signal A (HE-SIG-A) field or anext-generation Wi-Fi signal field (NG-SIG).

Example 47 may include the apparatus of example 44 and/or some otherexample herein, further comprising causing to set a bit in a secondfield associated with the first field, wherein the bit indicates thatpilot tone index locations of the first portion of the PHY frame areencrypted.

Example 48 may include the apparatus of example 47 and/or some otherexample herein, further comprising causing to send a shared keyinformation associated with encrypting the pilot tone index locations.

Example 49 may include the apparatus of example 47 and/or some otherexample herein, further comprising determining a pilot index associatedwith a lookup table for the pilot tone index locations.

Example 50 may include the apparatus of example 44 and/or some otherexample herein, further comprising determining the pilot tone indexlocations based on performing a bitwise exclusive OR operation.

Example 51 may include the apparatus of example 47 and/or some otherexample herein, further comprising determining the pilot tone indexlocations are encrypted using a keyed-hash message authentication code.

Example 52 may include the apparatus of example 44 and/or some otherexample herein, wherein the first field may be a basic service set (BSS)color field of the PHY frame.

Example 53 may include the apparatus of example 44 and/or some otherexample herein, further comprising including the encryption seedsequence in the first field of the PHY frame.

Example 54 may include a device comprising memory and processingcircuitry configured to: identify a physical layer (PHY) frame receivedfrom a device; determine a first bit in a first field of the PHY frameto indicate an encryption seed sequence included in a second field thePHY frame; identify the encryption seed sequence from the second field;determine pilot tone index locations associated with a third field ofthe PHY frame based on the encryption seed sequence; and decode thethird field based on the pilot tone index locations.

Example 55 may include the device of example 54 and/or some otherexample herein, wherein the first field may be a signaling fieldincluded in the PHY frame.

Example 56 may include the device of example 55 and/or some otherexample herein, wherein the signaling field may be a high-efficiencysignal A (HE-SIG-A) field or a next-generation Wi-Fi signal field(NG-SIG).

Example 57 may include the device of example 54 and/or some otherexample herein, wherein determining the first bit further indicates thatthe pilot tone index locations of a first portion of the PHY frame areencrypted.

Example 58 may include the device of example 54 and/or some otherexample herein, wherein the memory and processing circuitry are furtherconfigured to compute the pilot tone index locations using a keyed-hashmessage authentication code (HMAC), wherein an input to the HMAC mayinclude at least one of a shared key and the encrypting seed sequence.

Example 59 may include the device of example 58 and/or some otherexample herein, wherein the shared key may be shared during associationwith the device.

Example 60 may include the device of example 54 and/or some otherexample herein, wherein the memory and processing circuitry are furtherconfigured to determine the pilot tone index locations using a lookuptable using a pilot tone index included in the PHY frame.

Example 61 may include the device of example 54 and/or some otherexample herein, wherein the memory and processing circuitry are furtherconfigured to perform a cyclic redundancy code (CRC) check afterdecoding the third field of the PHY frame.

Example 62 may include the device of example 54 further comprising atransceiver configured to transmit and receive wireless signals.

Example 63 may include the device of example 62 and/or some otherexample herein, further comprising one or more antennas coupled to thetransceiver.

Example 64 may include a method comprising: identifying a physical layer(PHY) frame received from a device; determining a first bit in a firstfield of the PHY frame to indicate an encryption seed sequence includedin a second field the PHY frame; identifying the encryption seedsequence from the second field; determining pilot tone index locationsassociated with a third field of the PHY frame based on the encryptionseed sequence; and decoding the third field based on the pilot toneindex locations.

Example 65 may include the method of example 64 and/or some otherexample herein, wherein the first field may be a signaling fieldincluded in the PHY frame.

Example 66 may include the method of example 65 and/or some otherexample herein, wherein the signaling field may be a high-efficiencysignal A (HE-SIG-A) field or a next-generation Wi-Fi signal field(NG-SIG).

Example 67 may include the method of example 64 and/or some otherexample herein, wherein determining the first bit further indicates thatthe pilot tone index locations of a first portion of the PHY frame areencrypted.

Example 68 may include the method of example 64 and/or some otherexample herein, further comprising computing the pilot tone indexlocations using a keyed-hash message authentication code (HMAC), whereinan input to the HMAC may include at least one of a shared key and theencrypting seed sequence.

Example 69 may include the method of example 68 and/or some otherexample herein, wherein the shared key may be shared during associationwith the device.

Example 70 may include the method of example 64 and/or some otherexample herein, further comprising determining the pilot tone indexlocations using a lookup table using a pilot tone index included in thePHY frame.

Example 71 may include the method of example 64 and/or some otherexample herein, further comprising performing a cyclic redundancy code(CRC) check after decoding the third field of the PHY frame.

Example 72 may include an apparatus comprising means for performing amethod as claimed in any one of examples 64-71.

Example 73 may include a system comprising at least one memory devicehaving programmed instruction that, in response to execution, cause atleast one processor to perform the method of any one of examples 64-71.

Example 74 may include a machine readable medium including code, whenexecuted, to cause a machine to perform the method of any one ofexamples 64-71.

Example 75 may include an apparatus comprising means for identifying aphysical layer (PHY) frame received from a device; means for determininga first bit in a first field of the PHY frame to indicate an encryptionseed sequence included in a second field the PHY frame; means foridentifying the encryption seed sequence from the second field; meansfor determining pilot tone index locations associated with a third fieldof the PHY frame based on the encryption seed sequence; and means fordecoding the third field based on the pilot tone index locations.

Example 76 may include the apparatus of example 75 and/or some otherexample herein, wherein the first field may be a signaling fieldincluded in the PHY frame.

Example 77 may include the apparatus of example 76 and/or some otherexample herein, wherein the signaling field may be a high-efficiencysignal A (HE-SIG-A) field or a next-generation Wi-Fi signal field(NG-SIG).

Example 78 may include the apparatus of example 75 and/or some otherexample herein, wherein means for determining the first bit furtherindicates that the pilot tone index locations of a first portion of thePHY frame are encrypted.

Example 79 may include the apparatus of example 75 and/or some otherexample herein, further comprising means for computing the pilot toneindex locations using a keyed-hash message authentication code (HMAC),wherein an input to the HMAC may include at least one of a shared keyand the encrypting seed sequence.

Example 80 may include the apparatus of example 79 and/or some otherexample herein, wherein the shared key may be shared during associationwith the device.

Example 81 may include the apparatus of example 75 and/or some otherexample herein, further comprising means for determining the pilot toneindex locations using a lookup table using a pilot tone index includedin the PHY frame.

Example 82 may include the apparatus of example 75 and/or some otherexample herein, further comprising means for performing a cyclicredundancy code (CRC) check after decoding the third field of the PHYframe.

Example 83 may include an apparatus comprising means for performing amethod as claims in any one of the preceding example.

Example 84 may include a machine-readable storage includingmachine-readable instructions, when executed, to implement a method asclaimed in any preceding example.

Example 85 may include a machine-readable storage includingmachine-readable instructions, when executed, to implement a method ofrealize an apparatus as claimed in any preceding example.

Example 86 may include one or more non-transitory computer-readablemedia comprising instructions to cause an electronic device, uponexecution of the instructions by one or more processors of theelectronic device, to perform one or more elements of a method describedin or related to any of examples 1-85, or any other method or processdescribed herein.

Example 87 may include an apparatus comprising logic, modules, and/orcircuitry to perform one or more elements of a method described in orrelated to any of examples 1-85, or any other method or processdescribed herein.

Example 88 may include a method, technique, or process as described inor related to any of examples 1-85, or portions or parts thereof.

Example 89 may include an apparatus comprising: one or more processorsand one or more computer readable media comprising instructions that,when executed by the one or more processors, cause the one or moreprocessors to perform the method, techniques, or process as described inor related to any of examples 1-85 or portions thereof.

Example 90 may include a method of communicating in a wireless networkas shown and described herein.

Example 91 may include a system for providing wireless communication asshown and described herein.

Example 92 may include a device for providing wireless communication asshown and described herein.

Embodiments according to the disclosure are in particular disclosed inthe attached examples directed to a method, a storage medium, a deviceand a computer program product, wherein any feature mentioned in oneexample category, e.g., method, can be claimed in another examplecategory, e.g., system, as well. The dependencies or references back inthe attached examples are chosen for formal reasons only. However, anysubject matter resulting from a deliberate reference back to anyprevious examples (in particular multiple dependencies) can be claimedas well, so that any combination of examples and the features thereofare disclosed and can be claimed regardless of the dependencies chosenin the attached examples. The subject-matter which can be claimedcomprises not only the combinations of features as set out in theattached examples but also any other combination of features in theexamples, wherein each feature mentioned in the examples can be combinedwith any other feature or combination of other features in the examples.Furthermore, any of the embodiments and features described or depictedherein can be claimed in a separate example and/or in any combinationwith any embodiment or feature described or depicted herein or with anyof the features of the attached examples.

The foregoing descriptions of one or more implementations providesillustration and description, but is not intended to be exhaustive or tolimit the scope of embodiments to the precise form disclosed.Modifications and variations are possible in light of the aboveteachings or may be acquired from practice of various embodiments.

Certain aspects of the disclosure are described above with reference toblock and flow diagrams of systems, methods, apparatuses, and/orcomputer program products according to various implementations. It willbe understood that one or more blocks of the block diagrams and flowdiagrams, and combinations of blocks in the block diagrams and the flowdiagrams, respectively, may be implemented by computer-executableprogram instructions. Likewise, some blocks of the block diagrams andflow diagrams may not necessarily need to be performed in the orderpresented, or may not necessarily need to be performed at all, accordingto some implementations.

These computer-executable program instructions may be loaded onto aspecial-purpose computer or other particular machine, a processor, orother programmable data processing apparatus to produce a particularmachine, such that the instructions that execute on the computer,processor, or other programmable data processing apparatus create meansfor implementing one or more functions specified in the flow diagramblock or blocks. These computer program instructions may also be storedin a computer-readable storage media or memory that may direct acomputer or other programmable data processing apparatus to function ina particular manner, such that the instructions stored in thecomputer-readable storage media produce an article of manufactureincluding instruction means that implement one or more functionsspecified in the flow diagram block or blocks. As an example, certainimplementations may provide for a computer program product, comprising acomputer-readable storage medium having a computer-readable program codeor program instructions implemented therein, said computer-readableprogram code adapted to be executed to implement one or more functionsspecified in the flow diagram block or blocks. The computer programinstructions may also be loaded onto a computer or other programmabledata processing apparatus to cause a series of operational elements orsteps to be performed on the computer or other programmable apparatus toproduce a computer-implemented process such that the instructions thatexecute on the computer or other programmable apparatus provide elementsor steps for implementing the functions specified in the flow diagramblock or blocks.

Accordingly, blocks of the block diagrams and flow diagrams supportcombinations of means for performing the specified functions,combinations of elements or steps for performing the specified functionsand program instruction means for performing the specified functions. Itwill also be understood that each block of the block diagrams and flowdiagrams, and combinations of blocks in the block diagrams and flowdiagrams, may be implemented by special-purpose, hardware-based computersystems that perform the specified functions, elements or steps, orcombinations of special-purpose hardware and computer instructions.

Conditional language, such as, among others, “can,” “could,” “might,” or“may,” unless specifically stated otherwise, or otherwise understoodwithin the context as used, is generally intended to convey that certainimplementations could include, while other implementations do notinclude, certain features, elements, and/or operations. Thus, suchconditional language is not generally intended to imply that features,elements, and/or operations are in any way required for one or moreimplementations or that one or more implementations necessarily includelogic for deciding, with or without user input or prompting, whetherthese features, elements, and/or operations are included or are to beperformed in any particular implementation.

Many modifications and other implementations of the disclosure set forthherein will be apparent having the benefit of the teachings presented inthe foregoing descriptions and the associated drawings. Therefore, it isto be understood that the disclosure is not to be limited to thespecific implementations disclosed and that modifications and otherimplementations are intended to be included within the scope of theappended claims. Although specific terms are employed herein, they areused in a generic and descriptive sense only and not for purposes oflimitation.

What is claimed is:
 1. A device, the device comprising memory andprocessing circuitry configured to: determine a physical layer (PHY)frame to be sent to a station device; identify an encryption seedsequence to be used for encrypting a first portion of the PHY frame;include an indication of the encryption seed sequence in a first fieldof the PHY frame; encode the first portion of the PHY frame using theencryption seed sequence; cause to set a bit in a second fieldassociated with the first field, wherein the bit indicates that pilottone index locations of the first portion of the PHY frame areencrypted; cause to send a shared key information associated withencrypting the pilot tone index locations; and cause to send the PHYframe to the station device.
 2. The device of claim 1, wherein the firstportion is a signaling field of the PHY frame.
 3. The device of claim 2,wherein the signaling field of the PHY frame includes at least ahigh-efficiency signal A (HE-SIG-A) field or a next-generation Wi-Fisignal field (NG-SIG).
 4. The device of claim 1, wherein the memory andthe processing circuitry are further configured to determine a pilotindex associated with a lookup table for the pilot tone index locations.5. The device of claim 1, wherein the memory and the processingcircuitry are further configured to determine the pilot tone indexlocations based on performing a bitwise exclusive OR operation.
 6. Thedevice of claim 5, wherein the memory and the processing circuitry arefurther configured to determine the pilot tone index locations areencrypted using a keyed-hash message authentication code.
 7. The deviceof claim 1, wherein the first field is a basic service set (BSS) colorfield of the PHY frame.
 8. The device of claim 1, wherein the memory andthe processing circuitry are further configured to include theencryption seed sequence in the first field of the PHY frame.
 9. Thedevice of claim 1, further comprising a transceiver configured totransmit and receive wireless signals.
 10. The device of claim 9,further comprising one or more antennas coupled to the transceiver. 11.A non-transitory computer-readable medium storing computer-executableinstructions which when executed by one or more processors result inperforming operations comprising: identifying a physical layer (PHY)frame received from a device; determining a first bit in a first fieldof the PHY frame to indicate an encryption seed sequence included in asecond field the PHY frame, wherein determining the first bit furtherindicates that pilot tone index locations of a first portion of the PHYframe are encrypted, an wherein a shared key associated with encryptingthe pilot tone index locations is shared during association with thedevice; identifying the encryption seed sequence from the second field;determining pilot tone index locations associated with a third field ofthe PHY frame based on the encryption seed sequence; and decoding thethird field based on the pilot tone index locations.
 12. Thenon-transitory computer-readable medium of claim 11, wherein the firstfield is a signaling field included in the PHY frame.
 13. Thenon-transitory computer-readable medium of claim 12, wherein thesignaling field is a high-efficiency signal A (HE-SIG-A) field or anext-generation Wi-Fi signal field (NG-SIG).
 14. The non-transitorycomputer-readable medium of claim 11, wherein the operations furthercomprise computing the pilot tone index locations using a keyed-hashmessage authentication code (HMAC), wherein an input to the HMACincludes at least one of the shared key and the encrypting seedsequence.
 15. The non-transitory computer-readable medium of claim 11,wherein the operations further comprise determining the pilot tone indexlocations using a lookup table using a pilot tone index included in thePHY frame.
 16. The non-transitory computer-readable medium of claim 11,wherein the operations further comprise performing a cyclic redundancycode (CRC) check after decoding the third field of the PHY frame.